samba - Aug 2007 - Winbind usage

With only a Samba PDC, with everything defined in LDAP, is there any 
requirement for Winbind?

-- 
Daniel

On 8/24/07, Daniel L. Miller <dmiller@amfes.com>
wrote:
> With only a Samba PDC, with everything defined in LDAP, is there any
> requirement for Winbind?
>
We have never used it in our samba PDC/LDAP environment however with
this setup the security dialog of windows does not correctly list the
groups who have permissions on each file or folder. For each object
regardless of the ACL we see only entries for Administrators, Everyone
 and Users.

John

On Friday 24 August 2007, Daniel L. Miller wrote:
> With only a Samba PDC, with everything defined in LDAP, is there any
> requirement for Winbind?
I think the only reason to use it in this case (or even with a different 
passdb backend - any time when you are not authenticating against a Windows 
DC) is to absolutely distinguish between access from non-local domain member 
systems and local domain member systems.

From the Official HOWTO:
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html#id412001

"If the Samba server will be accessed from a domain other than the local
Samba
domain, or if there will be access from machines that are not local domain 
members, winbind will permit the allocation of UIDs and GIDs from the 
assigned pool that will keep the identity of the foreign user separate from 
users that are members of the Samba domain."

-- 
Chris